# Understand User Account Types

The Role property in a user account defines the account type. At a high level, two lmadmin roles are available--User and Administrator. However, the actual type of account you set up for either role depends on whether the user is managed locally by lmadmin or managed at the Windows Active Directory level.

Note: The default Administrator user name and password is admin and admin, which are defined in a locally managed account installed with lmadmin. You can use these credentials to access the lmadmin user interface initially and then proceed to set up other lmadmin user accounts. Additionally, your lmadmin installation might have offered the option to provide a default Active Directory domain user or group name for sign-in. If so, you can use either of these credentials to sign into the lmadmin user interface initially.

User Role

Users assigned the User role are limited to Dashboard functionality only. Assign this role only when you are password-protecting the Dashboard. (If the Dashboard is not password-protected, all users have Dashboard privileges automatically.) With Dashboard privileges, users can perform the following:

| • | Access the Dashboard to view license activity and alerts.

| • | (Locally managed users only) Change the user password.

| • | Select a Locale when multiple locales are configured on the system.

Note: To password-protect the Dashboard, use the Password Protect Dashboard option on the Server Configuration tab. See Server Configuration for more information.

To assign the User role to a user, select one of these account types in the Role field:

User Acct Type | Description
Locally Managed User | The user account is defined in and managed by lmadmin. At sign-in, the user provides the user name and password defined in the account.
Domain User | The user is defined in and managed by the Active Directory domain server. Only the domain user name is identified in the lmadmin account. At sign-in, the user provides this domain user name and the associated password (as defined on the domain server). lmadmin then contacts the domain server for validation of the user.
Domain User Group | The group is defined in and managed by the Active Directory domain server. Any domain user who is a member of this group automatically has User role privileges without the license administrator having to set up a separate lmadmin account for each user. Only the domain group name is identified in the lmadmin account. At sign-in, the user provides a domain user name and its associated password (as defined on the domain server). lmadmin then contacts the domain server for validation of the user against the members of this group. If multiple domain groups accounts are set up for the User role in lmadmin, Active Directory checks all these groups to locate and validate the user.

Administrator Role

Users assigned the Administration role can perform all actions available to the User role, plus the following:

| • | Access information displayed on the Administration page of the lmadmin user interface.

| • | Perform license server configuration and management tasks.

| • | Set up, edit, and delete other lmadmin user accounts.

To assign the Administrator role to a user, select one of these user account types in the Role field:

User Acct Type | Description
Locally Managed Admin | The administrator account is defined in and managed by lmadmin. At sign-in, the user provides the user name and password defined in the account.
Domain Administrator | The administrator is a domain user who is defined in and managed by the Active Directory domain server. Only the administrator’s domain user name is identified in the lmadmin account. At sign-in, the user provides this domain user name and the associated password (as defined on the domain server). lmadmin then contacts the domain server for validation of the user.
Domain Administrator Group | The administrator group is a domain group that is defined in and managed by the Active Directory domain server. Any domain user who is a member of this group automatically has Administrator role privileges without the license administrator having to set up a separate lmadmin account for each administrator. Only the domain group name is identified in the lmadmin account. At sign-in, the administrator provides a domain user name and its associated password (as defined on the domain server). lmadmin then contacts the domain server for validation of the user against the members of this group. If multiple domain groups accounts are set up for the Administrator role in lmadmin, Active Directory checks all these groups to locate and validate the user.

Open topic with navigation